Vulnerability Management Lead
About this role
Vulnerability Management Lead
Location: Liverpool / Hybrid (2 days per fortnight onsite)
Day Rate: £550 – £600 per day
Contract Length: Initial 6 months
Industry: IT Services / Critical National Infrastructure
Discipline: Information Security / Cyber Security
About Us
We are Bridge Staffing Agency, a dedicated recruitment partner committed to connecting exceptional talent with organizations where they can make a lasting impact. We take pride in building collaborative relationships and tailoring our search solutions to your professional goals, your pace, and your people.
The Opportunity
We are looking for an experienced, hands-on Vulnerability Management Lead to join a critical national infrastructure environment on an initial 6-month contract.
This is a build and optimization role where you will take complete ownership of establishing and evolving vulnerability management capabilities from the ground up across both IT and OT environments. You will leverage your tooling expertise and intelligence-led approach to identify, prioritize, and significantly reduce cyber risk across critical business services.
Key Responsibilities
Take ownership of the end-to-end Vulnerability Management function across IT and OT, driving a mature, intelligence-led approach to risk reduction.
Establish a robust asset management capability by cataloguing technology assets, building and maintaining the CMDB, and improving enterprise-wide visibility.
Partner with remediation teams to prioritize risk, facilitate weekly governance meetings, track remediation progress, and deliver meaningful KPI reporting to senior stakeholders.
Monitor the evolving threat landscape to deliver actionable cyber threat intelligence that strengthens the defensive posture and supports proactive threat hunting.
Assess and optimize existing vulnerability management tooling and processes, introducing enhancements in automation, coverage, and reporting maturity.
Operate as the technical security lead, influencing remediation activities and driving continuous improvement within a highly regulated environment.
What We’re Looking For
Proven commercial track record of establishing, scaling, or evolving vulnerability management capabilities from scratch.
Strong hands-on technical expertise with vulnerability management tooling, asset discovery, and CMDB maintenance across IT and OT ecosystems.
Experience integrating cyber threat intelligence into day-to-day vulnerability prioritization and operational workflows.
Excellent stakeholder management and communication skills, with the ability to influence remediation activities and present clear metrics to senior leadership.
Familiarity operating within secure, regulated, or Critical National Infrastructure (CNI) environments.